This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
File:                     v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json)
Hash identifier:          2rEukWdfu6qBVKyqe3FdC+eclZ5SAChqI3TKvn5/Lk4=
Subject key identifier:   19:FE:C3:72:C1:48:E7:A2:81:6D:A1:FA:65:D6:82:10:E9:31:A8:4A
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Certificate issuer:       /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial:       019C4390B633A755F6155BA325C7A5DD77B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:23 +0000
Files and hashes:         1: axLujUagH_dCn6TXOtWPBDE3Szo.roa (hash: jt/V9NWMIChAooozTeAvM5YQ3gDwItihIdrwd9f6W0g=)
                          2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: elp5iMxQB6w+0gFRnEf2jwc6B+qCWoJNV/wFMki/1gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:b6:33:a7:55:f6:15:5b:a3:25:c7:a5:dd:77:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
        Validity
            Not Before: Feb  9 18:01:23 2026 GMT
            Not After : Feb 10 18:01:23 2026 GMT
        Subject: CN=19fec372c148e7a2816da1fa65d68210e931a84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:c4:d8:64:36:c5:2b:39:5a:3f:48:a3:1c:
                    4b:13:8d:b8:89:82:ea:f1:3a:19:73:ee:a6:bb:80:
                    db:35:29:d4:68:8e:1b:5f:61:80:43:1f:45:57:ff:
                    99:b5:35:ee:dc:0f:72:4d:78:ab:31:5d:ab:b8:63:
                    ab:1f:d1:f1:2c:71:54:ec:da:c6:d6:7e:43:c1:51:
                    32:3d:d0:22:b1:fb:03:81:c0:19:cb:44:a3:3a:3d:
                    19:75:98:1f:ea:07:43:3b:91:30:8d:e7:c9:c3:de:
                    16:d7:0a:75:ee:65:2e:a6:f9:ff:56:96:46:3a:ca:
                    54:8c:6c:b2:61:d5:2d:73:66:db:70:7f:97:21:12:
                    9c:32:2e:dd:e8:b0:d2:ed:d6:c3:5c:af:d4:6d:06:
                    2d:5e:de:57:42:01:0b:3b:8d:41:50:a5:4a:d9:08:
                    fb:fb:98:7d:9d:17:d2:b9:0a:1d:95:fe:6b:85:1c:
                    23:3d:3c:4b:17:19:7f:c7:69:aa:7b:e5:1e:d2:a7:
                    b2:a2:2f:50:40:22:8f:6d:9a:b0:23:53:55:ce:7a:
                    30:8a:d0:13:ca:43:b0:65:fc:dc:24:9f:43:75:3d:
                    e1:8d:46:04:9e:41:59:56:19:ee:ca:f7:24:f1:fd:
                    0d:0d:84:65:54:94:44:65:69:11:d2:ab:18:39:76:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FE:C3:72:C1:48:E7:A2:81:6D:A1:FA:65:D6:82:10:E9:31:A8:4A
            X509v3 Authority Key Identifier:
                keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8b:48:77:2f:85:9c:9c:64:75:d8:c4:4e:ec:b0:52:ca:3f:
         c9:f9:d1:f2:d4:99:df:77:f9:8a:99:d8:eb:df:a4:eb:b4:de:
         14:15:6f:8e:f6:d2:8a:fc:ed:c3:c4:71:32:58:53:f3:d9:01:
         5d:c2:f9:44:05:b7:62:d3:ad:8e:c4:b6:3c:8b:c2:dc:1c:f6:
         7d:1e:04:89:ba:65:03:24:16:a1:43:4f:b8:43:6d:33:f5:ac:
         41:6f:6a:7b:42:9d:e3:b6:8e:31:46:d3:2e:fc:0b:bd:11:09:
         08:a7:ab:d4:d1:7a:60:5c:a5:b4:d5:a9:3e:e7:ba:64:86:33:
         1d:3d:b9:15:86:aa:09:04:7e:cc:30:75:00:20:19:7c:15:95:
         fb:83:5b:fb:67:8c:6e:a2:c8:64:7d:c3:df:cb:a9:bc:e3:55:
         83:c3:bc:b1:70:69:6d:83:25:ef:3a:72:7b:3d:dd:67:a6:04:
         99:11:09:1b:48:e0:72:f1:16:1c:b8:02:c7:b8:d1:b2:4b:50:
         49:09:f0:64:33:cf:26:48:2d:8d:b9:6a:7f:aa:08:34:8c:1f:
         7e:d4:9e:70:1d:2f:0d:5f:08:3a:4b:4b:4b:dd:04:2c:64:df:
         e5:67:2e:fe:d1:f2:31:f8:01:66:fd:c5:5b:a3:b0:20:e7:d3:
         a0:e0:a8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:16 2026 by rpki-client